2 matches found
CVE-2023-26131
All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...
6.1CVSS0.00691EPSS
SaveExploits1References8
CVE-2023-26131: Improper Neutralization of Input During Web Page Generation
All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...
6.1CVSS6AI score0.00691EPSS
SaveExploits1References4
20